Bug ID 1128988
Summary buggy AppArmor profiles in M17N:l10n.opensuse.org/l10n_opensuse_org-installer
Classification openSUSE
Product openSUSE Distribution
Version Leap 15.0
Hardware Other
OS Other
Status NEW
Severity Normal
Priority P5 - None
Component AppArmor
Assignee sbrabec@suse.com
Reporter suse-beta@cboltz.de
QA Contact qa-bugs@suse.de
Found By ---
Blocker ---

M17N:l10n.opensuse.org/l10n_opensuse_org-installer contains AppArmor profiles
with syntax errors.


usr.lib.git.git has
  #include <abstractions/ssl>
which doesn't exist.

My guess is that this should be one of
  #include <abstractions/ssl_certs>
or
  #include <abstractions/openssl>
I have no idea which one you need - if in doubt, remove the invalid line,
reload the profile and wait for log events.

Note that you'll need to apply this fix twice - once in the main profile, once
in the ssh child profile.


var.lib.weblate.ssh.ssh-weblate-wrapper needs the same fix (once).


usr.share.weblate.manage.py has
  deny "#include <abstractions/consoles>" rw,
which is an invalid rule. Please delete it.

If this line was added with aa-logprof or aa-genprof (I don't hope so), a
bugreport with the reproducer would be welcome.


On a general note - once you are sure the profiles cover everything you need,
please switch them to enforce mode.


You are receiving this mail because: